From 9a4b6825ea24d702114cbca8c3f14756dfe81241 Mon Sep 17 00:00:00 2001 From: Jim Anderson Date: Tue, 18 Jul 2023 07:15:54 -0500 Subject: [PATCH] fix org name comparison --- src/main/java/com/auth0/utils/tokens/IdTokenVerifier.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/main/java/com/auth0/utils/tokens/IdTokenVerifier.java b/src/main/java/com/auth0/utils/tokens/IdTokenVerifier.java index 3dde4160..9a354713 100644 --- a/src/main/java/com/auth0/utils/tokens/IdTokenVerifier.java +++ b/src/main/java/com/auth0/utils/tokens/IdTokenVerifier.java @@ -154,7 +154,7 @@ public void verify(String token, String nonce, Integer maxAuthenticationAge) thr if (isEmpty(orgNameClaim)) { throw new IdTokenValidationException("Organization name (org_name) claim must be a string present in the ID token"); } - if (!org.equalsIgnoreCase(orgNameClaim)) { + if (!org.toLowerCase().equals(orgNameClaim)) { throw new IdTokenValidationException(String.format("Organization (org_name) claim mismatch in the ID token; expected \"%s\" but found \"%s\"", this.organization, orgNameClaim)); } }